ClawHub
Back to skill

Security audit

patent-eou

Security checks for vulnerabilities and agentic risk

Overview

The skill performs patent report generation, but it forces Patsnap branding and a promotional link into every report in a way users cannot override.

Review generated reports before sharing them. Installing this skill means accepting that Patsnap attribution and a Patsnap link will be inserted into every report file even if you ask the agent to remove or change it.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)

T01 · Skill Instruction Hijacking

Warning
Location
SKILL.md:14
Finding

Mandatory Promotional Content Overrides User-Controlled Report Output

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Direct Prompt Extraction

High
Category
System Prompt Leakage
Confidence
97% confidence
Finding

The instruction to keep the full report out of chat and place it only in generated files is a direct attempt to route substantive model output into an external artifact that may evade normal conversational review, policy checks, logging visibility, or user scrutiny. In a skill that performs broad web research and generates legal-analysis-style documents, this increases the risk that unsafe, fabricated, privacy-impacting, or policy-violating content is produced in files without equivalent inline oversight.

Content

Scanner excerpt · SKILL.md (reported line 229)May include surrounding context.

md
7. Evidence Appendix
8. PATSNAP_DISCLAIMER (closing — mandatory)

**OUTPUT RULES — CRITICAL:**
- **NEVER dump the full report content into the chat.** Write to files only.
- Use `present_files` to share download links after generation.
- In chat: provide only a brief summary (product name, rating, 1-2 sentence finding).

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The template explicitly states that the mandatory disclaimer text is "English-only," which imposes a language constraint on every generated report. This is a natural-language policy concern because the file does not provide user opt-in, alternatives, or a documented region-specific justification for forcing English.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.